standard
turbot/aws_compliance

Pipeline: Correct CloudTrail trails with S3 object level logging for read events disabled

Send notifications for CloudTrail trails with S3 object level logging for read events disabled.

Run the pipeline

To run this pipeline from your terminal:

flowpipe pipeline run aws_compliance.pipeline.correct_cloudtrail_trails_with_s3_object_level_logging_for_read_events_disabled \
--arg 'items=<list(object({
title = string
bucket_selector_count = number
conn = string
account_id = string
home_region = string
}))>'

Use this pipeline

To call this pipeline from your pipeline, use a step:

step "pipeline" "step_name" {
pipeline = aws_compliance.pipeline.correct_cloudtrail_trails_with_s3_object_level_logging_for_read_events_disabled
args = {
items = <list(object({
title = string
bucket_selector_count = number
conn = string
account_id = string
home_region = string
}))>
}
}

Params

NameTypeRequiredDescriptionDefault
items
list(object({
      title                 = string
      bucket_selector_count = number
      conn                  = string
      account_id            = string
      home_region           = string
    }))
YesA collection of detected resources to run corrective actions against.-
notifier
notifier
YesThe name of the notifier to use for sending notification messages.notifier.default
notification_level
string
verbose, info, error
YesThe verbosity level of notification messages to send.info
approvers
list(notifier)
YesList of notifiers to be used for obtaining action/approval decisions.notifier.default

Outputs

This pipeline has no outputs.

Tags

category = Compliance
folder = Internal
mod = aws
service = AWS/Cloudtrail